Advisory Database
  • Advisories
  • Dependency Scanning
  1. golang
  2. ›
  3. github.com/greenpau/caddy-security
  4. ›
  5. CVE-2024-21497

CVE-2024-21497: Open Redirect in github.com/greenpau/caddy-security

February 17, 2024 (updated March 4, 2026)

All versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection.

References

  • blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy
  • github.com/advisories/GHSA-8hp3-rmr7-xh88
  • github.com/greenpau/caddy-security/issues/268
  • nvd.nist.gov/vuln/detail/CVE-2024-21497
  • security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249861

Code Behaviors & Features

Detect and mitigate CVE-2024-21497 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions up to 1.1.23

Solution

Unfortunately, there is no solution available yet.

Impact 5.4 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Learn more about CVSS

Weakness

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Source file

go/github.com/greenpau/caddy-security/CVE-2024-21497.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:17:27 +0000.